{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7df6eaee-9d60-56ab-905f-041ea14a670b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3", "version": "6.1.13-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:8409cfa4-61a5-5dcc-8093-6887b9e73382", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:8305080d-4680-5ee0-9027-42826ba04151", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:f77348b9-4dc7-582f-8752-670a86e3ce30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:657e1660-d379-5357-9c75-e3959380e5d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:9a052724-196c-5cc2-ad7c-fc6927053965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:e77e1204-fa07-562a-9bfc-e0d48d09a1d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:727b0f25-9721-51f9-8974-d1dfd2214731", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:535574c9-efa4-5bbd-884a-c896e069f575", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:0f76f5f0-7a4f-57ef-8857-d41a9247dfac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:498d9551-426c-5c9a-b680-18e608cffcfd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:69a5e2c9-cc47-5bc9-970a-86e28360b361", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:f25aea47-5ec9-5960-a443-567561c16e44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:8d97ccd9-801e-55f2-b289-64145a7b08be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:37ba2097-7725-5724-8593-d47fd6b2b968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:b7f0797a-db49-595c-8b14-1247df953583", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:47690c71-4555-5442-914a-99e6060b6c3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:f2e710df-0cd1-5bdd-a790-e110c2767d13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:d5db3447-5914-58d2-9e4f-2ed50712e72a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:f0305361-abd2-5bba-85bc-235820479c4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:96c87ac3-5cb9-54c7-a909-e458264ee8cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:0e65519d-5e93-5228-b25f-6d79f3de7412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:99c95baf-abe0-521a-b6ac-92597c98baf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:cd9c62b8-d2a6-5066-995a-a5b1a24fa01d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:a64831d7-0e4b-59a6-8e65-ad2a49d434f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:b99321e0-3371-5aa3-8991-2ff3456e95f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:25864d10-8dcf-5b7a-8b6d-a77266aacea0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:0d74107b-7c04-54fe-9c48-1422e852e850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:2011ef5a-b096-53b9-beba-39485c8ec002", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:c97ba877-5958-5279-b37a-e2bb9be7952b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:0bfc6cdb-932a-5179-9213-2a4f016ddb74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:80b57552-1467-5bf2-9bb9-060f81c98743", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:99e3ee71-e1c3-5724-af14-97e09acea2b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:ef966596-e5be-5266-8ce1-650d6793c293", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:6b50da8d-abb6-52c4-888e-c55291c57695", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:09a228fd-84a7-591d-9932-cf96d8b237fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:c5d78a05-2230-5c1d-83bb-7277a9bb38ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:183ffa7d-4d25-5582-9489-5ed50ba4b4f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:c89a7ea0-506c-5fde-b310-0420d539ca52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:d6a1e7d9-e702-5b8c-a614-ad6ccab6b8b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:d1251c28-4612-5c14-b4be-b27e058ad6db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:e2317bdb-492f-564e-9c23-d701cf0b5c1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ], "bom-ref": "urn:uuid:e74f7e6d-1f9d-59d6-95d5-ede56daaee1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.13-tuxcare.3" } ] }